This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json) Hash identifier: T58iLzX81XKnO+iUBMg46np9QQ42C9mHsyiyPAJQ53k= Subject key identifier: 1C:C5:27:95:F0:E0:0F:EB:FF:21:30:66:C7:8D:1F:8F:78:45:E1:70 Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91 Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691 Certificate serial: 019BAE38B220AEF2DA079C34A38EB80C5437 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft Manifest number: 17C3 Signing time: Sun 11 Jan 2026 18:01:49 +0000 Manifest this update: Sun 11 Jan 2026 18:01:49 +0000 Manifest next update: Mon 12 Jan 2026 18:01:49 +0000 Files and hashes: 1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=) 2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: WPTlQTaV84711FhUk4a58w4FxZfP14tr3J2YKvctAPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:b2:20:ae:f2:da:07:9c:34:a3:8e:b8:0c:54:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691 Validity Not Before: Jan 11 18:01:49 2026 GMT Not After : Jan 12 18:01:49 2026 GMT Subject: CN=1cc52795f0e00febff213066c78d1f8f7845e170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:85:f9:c3:ec:9e:da:71:2b:5d:2e:79:5b: 22:0e:ad:63:3d:ae:94:75:4f:7a:08:66:c3:a2:0c: c7:31:5d:40:39:66:68:f3:8e:bb:0d:02:bf:bb:a3: 76:b2:bc:64:df:81:b4:6b:d2:74:63:e7:57:c7:10: b8:e3:47:c0:19:89:32:72:8f:8e:92:a3:67:84:d2: 35:20:8b:26:6d:be:17:0f:8f:fe:e8:61:8c:a6:f3: fb:ac:fc:d9:14:70:89:95:ee:2b:ac:ff:15:3f:83: db:0d:ee:0d:94:c0:4f:ef:31:2d:c6:e6:46:28:2d: 2c:6e:cd:03:73:13:b9:3e:21:67:51:bd:fd:f4:a2: ce:5e:54:0e:6c:07:d5:12:87:7a:be:f7:d8:f3:a3: db:13:a8:61:9b:12:b0:a3:1c:69:23:af:c3:2a:55: c5:d8:31:1f:6e:ee:e1:70:8a:6a:78:c3:c8:fd:17: 8f:4e:11:50:3d:03:8a:54:47:08:6e:5c:db:fd:58: 3b:21:5c:14:83:e2:38:a0:2c:77:7d:33:2c:ec:37: eb:f2:6c:c1:d2:52:4d:7e:85:56:51:5b:b2:92:cc: 81:b5:29:88:58:f3:7c:bd:fe:45:53:f5:a6:1d:6c: bc:cf:2b:f6:c3:7a:ac:00:79:ca:9f:ba:db:a4:22: 47:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C5:27:95:F0:E0:0F:EB:FF:21:30:66:C7:8D:1F:8F:78:45:E1:70 X509v3 Authority Key Identifier: keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9d:13:c5:45:9d:bb:9e:4e:8d:ef:f6:10:33:56:42:fa:6d: cc:eb:ff:cb:e7:33:5b:3f:51:30:d8:4f:bc:44:7e:e3:1b:da: f8:b7:c3:e4:9d:4b:4f:93:5e:ba:e3:e3:d9:6a:9a:92:32:d6: bc:bd:05:a9:05:ce:1e:d8:9e:46:19:fa:4a:62:ae:d3:9d:e3: a1:d1:f7:1d:27:77:58:16:54:ab:8b:1b:9d:8a:57:a4:bd:73: 1b:92:64:c8:47:3a:20:ac:a7:fc:34:f5:4e:b1:be:2b:8c:eb: cb:aa:a5:6c:19:d1:f5:df:28:7b:1d:01:05:8b:95:e0:27:a3: 93:d8:65:64:a5:08:86:7e:33:b8:de:0f:5e:97:09:7d:87:0c: 7e:f6:ca:1d:7d:86:94:83:2b:ee:d5:12:e4:aa:23:9c:cf:1d: 34:89:e8:69:dc:78:c3:e0:3c:0e:0c:41:d7:0e:f5:9b:8d:99: f2:5d:ff:2b:41:66:86:66:3f:11:1f:3e:96:2c:e9:6f:4a:e3: 99:bc:c6:e6:84:f5:a5:1e:78:95:19:d9:45:83:68:7c:0a:13: 0a:cb:9a:1f:1d:62:89:ce:2c:1d:5e:7b:72:a1:16:8d:8e:e5: d0:ce:93:c7:7e:ac:5b:94:7b:28:d3:df:9e:45:a3:fc:17:9d: 81:4b:c4:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuOLIgrvLaB5w0o464DFQ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Yzk4Y2JiMzdmZWEyZTljOWE2ZWI2ZjkyODg3YzA1YTRj NTA2OTEwHhcNMjYwMTExMTgwMTQ5WhcNMjYwMTEyMTgwMTQ5WjAzMTEwLwYDVQQD EygxY2M1Mjc5NWYwZTAwZmViZmYyMTMwNjZjNzhkMWY4Zjc4NDVlMTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPuF+cPsntpxK10ueVsiDq1jPa6U dU96CGbDogzHMV1AOWZo8467DQK/u6N2srxk34G0a9J0Y+dXxxC440fAGYkyco+O kqNnhNI1IIsmbb4XD4/+6GGMpvP7rPzZFHCJle4rrP8VP4PbDe4NlMBP7zEtxuZG KC0sbs0DcxO5PiFnUb399KLOXlQObAfVEod6vvfY86PbE6hhmxKwoxxpI6/DKlXF 2DEfbu7hcIpqeMPI/RePThFQPQOKVEcIblzb/Vg7IVwUg+I4oCx3fTMs7Dfr8mzB 0lJNfoVWUVuyksyBtSmIWPN8vf5FU/WmHWy8zyv2w3qsAHnKn7rbpCJH4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzFJ5Xw4A/r/yEwZseNH494ReFwMB8GA1UdIwQY MBaAFHnJjLs3/qLpyabrb5KIfAWkxQaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQt OTE1MTc1ZTM2ZThlLzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQtOTE1MTc1ZTM2ZThl LzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ0TxUWd u55Oje/2EDNWQvptzOv/y+czWz9RMNhPvER+4xva+LfD5J1LT5NeuuPj2WqakjLW vL0FqQXOHtieRhn6SmKu053jodH3HSd3WBZUq4sbnYpXpL1zG5JkyEc6IKyn/DT1 TrG+K4zry6qlbBnR9d8oex0BBYuV4Cejk9hlZKUIhn4zuN4PXpcJfYcMfvbKHX2G lIMr7tUS5KojnM8dNInoadx4w+A8DgxB1w71m42Z8l3/K0FmhmY/ER8+lizpb0rj mbzG5oT1pR54lRnZRYNofAoTCsuaHx1iic4sHV57cqEWjY7l0M6Tx36sW5R7KNPf nkWj/BedgUvE0g== -----END CERTIFICATE-----Generated at Mon Jan 12 04:08:07 2026 by rpki-client